Legal

Privacy policy

Effective from: 1 January 2026 · MaxMenu Inc.

1. Data controller

MaxMenu Inc. ("MaxMenu") is the controller of personal data collected through maxmenu.com, management dashboards, public menus and the embeddable widget.

Contact: [email protected]
1111B S Governors Ave STE 25367, Dover, DE 19904, United States

2. Data we collect

Restaurants and dashboard users

  • Account data: name, email, role, associated restaurant.
  • Billing and subscription data.
  • Dashboard activity logs (publishes, configuration changes).

Guests (Order & Pay checkout)

  • Order data: items, table, amounts, tip.
  • Payment data processed by Stripe — MaxMenu does not store full card numbers.
  • Technical data: IP, device, browser language (for fraud prevention and operations).

3. Purpose and legal basis

  • Provision of the contracted service (contract performance).
  • Payment processing via Stripe (contract performance and legitimate interest).
  • Security, fraud prevention and legal compliance (legitimate interest / legal obligation).
  • Product communications and support (legitimate interest / consent where applicable).

4. Processors and transfers

We share data with providers necessary to operate the service:

  • Stripe — payment processing.
  • Google Cloud — storage and database (Cloud Spanner).
  • Cloudflare — CDN, Workers and edge security.

Some providers may process data outside the EEA. MaxMenu applies contractual safeguards (standard contractual clauses) where appropriate.

5. Retention

We retain data while the account is active and for as long as necessary for legal, accounting obligations and dispute resolution. Technical logs are rotated periodically according to internal policy.

6. Your rights

Depending on your jurisdiction (GDPR, CCPA or others), you may request access, rectification, erasure, restriction, portability or objection by contacting [email protected]. You may also lodge a complaint with your data protection authority.

7. Cookies and analytics

We use essential cookies for session, preferences (light/dark theme) and security. Analytics cookies, if enabled, will be documented in a consent banner where required by jurisdiction.

8. Changes

We may update this policy. The effective date will be changed at the top. Continued use of the service after material changes implies acceptance.

Terms of service → · Documentation →